Risk governance in CSR reporting refers to what?

• A. A simple list of all risks without any action.
• B. An oversight framework to identify, assess, and manage risks; CSR reporting communicates how sustainability risks are governed.
• C. A marketing plan for risk-averse products.
• D. A financial audit unrelated to sustainability.

Answer: (B)

Risk governance in CSR reporting is about how an organization structures oversight of sustainability risks—who is responsible, how risks are identified, evaluated, mitigated, and monitored, and how those governance actions are disclosed to stakeholders. It’s an oversight framework that integrates risk management with strategy, risk appetite, and internal controls, and it explains in the report how sustainability risks are governed. This goes beyond just listing risks or promoting products; it emphasizes the processes, roles, and accountability behind managing those risks and communicating them transparently. The other options miss this governance and communication element: one describes simply listing risks without action, another is a marketing plan for unrelated products, and the last is a financial audit not tied to sustainability.